A software bill of materials (SBoM) generator for Swift packages

Generates a Software Bill of Materials in CycloneDX JSON Format from Veracode SCA Agent results.

Update Python modules in a project's VENV dir, update requirements.txt and also update the Software Bill of material (SBOM)

GitHub action to generate a CycloneDX SBOM for Swift and Objective-C projects that use CocoaPods.

Fast and lightweight Python library for parsing and writing SPDX JSON documents correctly.

Fast and lightweight Python library for parsing and writing SPDX JSON documents correctly.

A GitHub Action that creates a SBOM from your application so you can meet compliance and security requirements. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements, and has the SBOM to show it!

sBOM generator and storing versions of artifacts

Use SBOM metadata to validate release integrity.

Analyze any snippet, file, or repository to detect possible security flaws such as secret in code, open source vulnerability, code security, vulnerability, insecure infrastructure as code, and potential legal issues with open source licenses.

Creates CycloneDX Software Bill of Materials (SBOM) documents for C/C++ projects using Conan

GitHub action to generate a CycloneDX SBOM for Go modules

Dockerfile and scripts to build a container image that facilitates generating and uploading Software Bill of Materials (SBOM) to sbom.sh utilizing various open-source SBOM tools such as Trivy, Grype, and Syft.

GitHub action to generate a CycloneDX SBOM for .NET

PainKiller Security Tools

Creates CycloneDX Software Bill of Materials (SBOM) from Ruby projects

GitHub action to generate a CycloneDX SBOM for Python

GitHub action to generate a CycloneDX SBOM for PHP Composer

GitHub action to generate a CycloneDX SBOM for Node.js

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Secure Software Supply Chain Lifecycle in Cybersecurity.